- LP #1071067: Use a stronger random number generator and a constant time comparison function.
- LP #966101: Recognize special zope2.Private permission in ZCML role directive.
- LP #1047318: Tighten import restrictions for restricted code.
- Fix a bug in ZopeSecurityPolicy.py. Global variable rolesForPermissionOn could be overridden if __role__ had custom rolesForPermissionOn.
- Add Anonymous as a default role for Public permission.
- Exclude compiled .so and .dll files from source distributions.
- Added manifest.in to ensure the inclusion of the include directory into the release.
- Apply changes made available in Products.Zope_Hotfix_20111024 and make them more robust.
- Return the created user in _doAddUser.
- Added IUser interface.
- LP #659968: Added support for level argument to the
__import__
function as introduced in Python 2.5. Currently only level=-1 is supported.
- Added a
role
subdirective for thepermission
ZCML directive. If any roles are specified, they will override the default set of default roles (Manager).
- Added
override_existing_protection
parameter to the protectName helper.
- Restore security declarations for deprecated
sets
module.
- Released as separate package.